
$ rpki-client -vvf rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.mft
File: rSHpWiYaLoAl4zypVIJcFHCzt6M.mft (raw, json)
Hash identifier: yvVl/Y8Y8WVyOb3rlouqYmy8yP4IFGyTc2c18zxwQRs=
Subject key identifier: 01:63:6E:4F:E7:57:D8:FF:63:EE:6D:2F:CC:86:AF:D0:3C:3B:D2:A7
Authority key identifier: AD:21:E9:5A:26:1A:2E:80:25:E3:3C:A9:54:82:5C:14:70:B3:B7:A3
Certificate issuer: /CN=A91508C4/serialNumber=AD21E95A261A2E8025E33CA954825C1470B3B7A3
Certificate serial: 07FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHpWiYaLoAl4zypVIJcFHCzt6M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.mft
Manifest number: 07F5
Signing time: Tue 18 Aug 2026 21:37:33 +0000
Manifest this update: Tue 18 Aug 2026 21:37:32 +0000
Manifest next update: Tue 25 Aug 2026 21:37:32 +0000
Files and hashes: 1: rSHpWiYaLoAl4zypVIJcFHCzt6M.crl (hash: 6tTDxuQpYbwofa0yqaI6jKyLspPokWXhDbyKdbp4/0g=)
2: B855A21C3E1211EB8D23EB6CC4F9AE02.roa (hash: l3JeAQ3S0YOaZPvLg1VADUfgUPauzx1iQ/ocLZ5FTmk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.crl
rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHpWiYaLoAl4zypVIJcFHCzt6M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 21:37:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2045 (0x7fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91508C4, serialNumber=AD21E95A261A2E8025E33CA954825C1470B3B7A3
Validity
Not Before: Aug 18 21:37:32 2026 GMT
Not After : Aug 25 21:37:32 2026 GMT
Subject: CN=6a84d09d-c135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a5:ff:88:1d:2c:de:0e:a3:55:37:f1:d5:08:
1c:a4:30:b9:71:98:48:6e:19:8e:fb:2a:6f:bc:8f:
b9:b0:57:90:c3:44:a3:dc:61:48:9c:6f:f1:05:bd:
b6:d4:2e:8e:f7:9b:15:07:36:b5:09:63:e2:11:cc:
81:39:be:de:d0:48:df:ee:27:3a:f6:00:93:6e:c3:
99:fd:8e:d6:1c:32:b3:bc:97:26:b3:e5:e9:b1:e3:
fd:ff:c4:85:bb:1a:2a:66:41:d5:f3:a2:fc:c5:ef:
70:7f:09:8d:ab:fd:79:51:d9:bd:9e:95:51:74:29:
92:dc:d4:f2:61:82:7b:b8:22:84:8f:a2:7f:66:09:
74:57:7e:d5:0f:ea:e4:52:1a:a0:3a:80:c0:79:4b:
e2:72:98:b4:b4:93:4f:23:91:84:4e:8b:8f:db:1f:
3e:3f:d9:c8:6a:86:6b:0f:ec:45:0c:8f:56:f5:90:
66:b3:af:63:7a:cc:c4:c9:5b:de:61:53:4a:71:e1:
68:5b:d8:e0:0c:6d:3e:50:91:a1:00:db:18:54:65:
84:46:5f:ce:32:d8:d1:a7:ff:b9:cd:c5:93:ec:22:
a2:ab:9c:ea:01:eb:b8:36:3f:41:0e:53:5b:6a:54:
f1:9d:29:67:8f:6e:32:62:16:87:d6:06:93:5f:cd:
40:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:63:6E:4F:E7:57:D8:FF:63:EE:6D:2F:CC:86:AF:D0:3C:3B:D2:A7
X509v3 Authority Key Identifier:
keyid:AD:21:E9:5A:26:1A:2E:80:25:E3:3C:A9:54:82:5C:14:70:B3:B7:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHpWiYaLoAl4zypVIJcFHCzt6M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:8e:43:17:7b:14:eb:51:f3:1e:9c:da:5b:3b:bc:57:37:2c:
20:e5:0c:d3:8c:08:ee:ac:4c:c5:5e:59:ad:17:9e:fc:39:4a:
ca:4a:b0:18:96:9d:cc:d6:5e:88:3d:66:f1:1f:de:cd:4a:2d:
85:9e:79:d6:66:86:1f:af:29:ed:7b:6a:81:0f:2e:df:01:6e:
a9:f4:d5:44:a3:bf:d4:77:75:51:ed:3d:bb:f6:ba:b9:e8:2c:
51:29:6b:c5:63:2d:be:97:cd:c5:37:cb:86:90:d0:90:b4:f0:
fe:9c:ba:22:cf:89:c8:a9:e3:05:23:c2:34:c6:bb:a8:9f:45:
74:0f:5e:7a:a2:c3:64:77:b3:73:b2:54:7a:bf:17:79:5c:1c:
57:58:a9:58:29:f0:d5:d4:ed:84:9d:ba:78:73:54:cb:70:61:
e0:e1:3c:b5:90:61:68:8e:2d:54:7d:01:b2:77:4a:e0:30:0c:
24:54:b2:fe:7d:6c:75:fd:4b:e0:52:48:0b:c1:2b:49:34:a4:
31:76:6e:77:5f:ca:d1:ff:a1:fb:38:c0:d0:9f:21:86:26:b2:
80:b2:cd:ad:e0:52:6c:a9:0f:87:d9:7f:30:40:c0:53:cd:59:
a0:18:7b:bc:3c:64:2e:97:3c:9d:96:a8:bf:84:c5:ec:4a:04:
ae:d1:93:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:50:47 2026 by rpki-client